[bisq-network/bisq] Automatic download of latest version is done over clearnet rather than Tor (#3795)

[Devin Bileck]

#### Description

The feature that automatically downloads the installer for the latest version does so over clearnet, as opposed to over Tor. This is a potential privacy concern as anyone capturing/monitoring network traffic could see requests being made to bisq.network and downloading of the installer.

#### Version

ALL

### Steps to reproduce

- Run an older version of Bisq
- Run Wireshark and capture network traffic
- Initiate the download of the latest Bisq version from within the app

### Expected behaviour

All network traffic for downloading the installer should be encrypted and routed through Tor.

### Actual behaviour

A DNS request for bisq.network can be seen within Wireshark and downloading of the installer.

#### Additional info

DownloadTask opens a URL connection without utilizing a proxy.
https://github.com/bisq-network/bisq/blob/master/desktop/src/main/java/bisq/desktop/main/overlays/windows/downloadupdate/DownloadTask.java#L121

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/bisq/issues/3795
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20191216/2ce5c905/attachment-0001.html>